Virtual Network Packet Routing via Acceleration Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transmission methods using virtual private networks (VPNs) suffer from performance degradation due to encryption and decryption processes, leading to increased delays and reduced efficiency, especially in poor network environments.
Innovation Solution
An accelerated data transmission method that routes data packets through a virtual network device, identifies and updates the access address, and transmits them to an acceleration server, bypassing encryption and decryption processes to improve efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption and decryption processes are used for data transmission through VPN, then security is improved, but transmission efficiency deteriorates due to increased processing time and delay
Solution Approach 1:
The patent extracts the encryption and decryption processes from the data transmission path by introducing a dedicated acceleration server that handles these operations separately. The acceleration server receives data packets, performs encryption/decryption, and returns processed packets to the original transmission path, thereby removing the security processing bottleneck from the main data flow and improving overall transmission efficiency.
Solution Approach 2:
The acceleration server acts as an intermediary component between the client and the destination server. It intercepts data packets, performs security processing (encryption/decryption), and relays the processed packets through its own network connection. This intermediary approach allows security operations to be centralized and optimized, preventing direct security processing delays at the client or destination servers.
2Reliability
If private protocol communication is used for VPN connection establishment, then connection security is improved, but communication delay increases due to additional processing requirements
Solution Approach 1:
The acceleration server establishes a dedicated network connection to the destination server in advance, before actual data transmission begins. This pre-established connection serves as a dedicated tunnel that eliminates the need for complex private protocol handshakes during data transmission, reducing communication delay while maintaining security through the pre-configured secure path.
Solution Approach 2:
The acceleration server creates a simplified copy of the data transmission process by receiving packets from the client, performing necessary security transformations, and forwarding them through its own optimized network path. This copying approach allows the original client-server communication to be replicated through a more efficient path without requiring complex real-time protocol negotiation.
3Reliability
If VPN server performs encryption and decryption for all data packets, then data protection is improved, but server processing efficiency deteriorates
Solution Approach 1:
The acceleration server implements differentiated processing based on packet characteristics. Instead of uniformly encrypting/decrypting all packets, it identifies packets requiring security processing and applies encryption/decryption only to those specific packets. This selective approach maintains data protection where needed while improving overall server processing efficiency by avoiding unnecessary operations on packets that don't require security handling.
Data Source
AI summary
This application relates to an accelerated data transmission method and apparatus, a computer device, a computer-readable storage medium, and a computer program product. The method includes routing a data packet transmitted by an application client of an application to be accelerated to a virtual network device; retrieving a network layer data packet from the virtual network device; taking an address of an acceleration server associated with the application client as an updated access address of the network layer data packet, and adding the original access address to the data segment to obtain an updated data packet; and transmitting the updated data packet to the acceleration server, the acceleration server accessing an application server corresponding to the original access address, and sending a response data packet returned by the acceleration server to the application client.